Apache + Jetty 9 + IdP?

[Cantor, Scott]

On 4/15/15, 1:27 PM, "John Dennis" <jdennis at redhat.com> wrote:


>
>The problem of ECP client authentication was perhaps a less than ideal
>example of this architecture but everything said still applies. The lack
>of AJP support in Jetty 9 definitely makes this architecture more
>difficult. IMHO it was a poor decision on the part of the Jetty devs to
>remove this feature.

I agree, and they have a bug open on this.

https://bugs.eclipse.org/bugs/show_bug.cgi?id=425244

People just need to weigh in, but my advice is not to make this about the 
Shibboleth SP, because there are simply *really* good reasons why AJP 
>>>>> HTTP as a tunneling mechanism. They simply are wrong about the 
>>>>>conclusion they reached that AJP is somehow outdated. mod_jk is 
>>>>>certainly outdated, but that's a totally different issue. 
>>>>>mod_proxy_ajp has been the standard module for years and is perfectly 
>>>>>well supported.

-- Scott